Technical impact
A heap‑based buffer overflow occurs in the AFC module of libimobiledevice when processing data in src/afc.c for all releases up to version 1.4.0. The vulnerability is triggered by remotely crafted AFC traffic and can cause an overflow of a heap buffer, which may allow the attacker to overwrite adjacent memory and potentially execute arbitrary code. The public availability of an exploit indicates that the flaw can be leveraged in practice, although the description does not confirm that the attack directly resulted in code execution in the wild.
Affected Systems
Any installation that uses the libimobiledevice library version 1.4.0 or earlier is vulnerable. This library provides an interface for communicating with iOS devices, so systems that rely on it for device management or debugging are at risk.
Risk and Exploitability
The CVSS score of 5.3 classifies the flaw as moderate, and the EPSS score of less than 1 % suggests a low exploitation probability. The vulnerability is not listed in the CISA KEV catalog, and the attack vector is remote, requiring the ability to send crafted AFC data to the vulnerable library. Overall risk is moderate but non‑negligible for environments that use the affected library without additional controls.
